5 docs tagged with "best-practices"

Humans, services, and AI agents should share one policy engine — not a separate "AI governance" stack.

Define a promotion chain (dev → staging → prod) in entity environment config.

Opinionated guidance for production OPA with EnforceAuth.

Well-structured Rego is easier to review in Git, test in CI, and promote through EnforceAuth environments. These conventions match what we see in enterprise Policy-as-Code repos.

Authorization bugs are false allows — the highest-severity class of policy defects. Test Rego before EnforceAuth promotes bundles to production.